Vulnerabilities > CVE-1999-1434 - Unspecified vulnerability in Slackware Linux

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
slackware
exploit available

Summary

login in Slackware Linux 3.2 through 3.5 does not properly check for an error when the /etc/group file is missing, which prevents it from dropping privileges, causing it to assign root privileges to any local user who logs on to the server.

Exploit-Db

descriptionSlackware Linux <= 3.5 /etc/group missing results in Root access Vulnerability. CVE-1999-1434. Local exploit for linux platform
idEDB-ID:19122
last seen2016-02-02
modified1998-07-13
published1998-07-13
reporterRichard Thomas
sourcehttps://www.exploit-db.com/download/19122/
titleSlackware Linux <= 3.5 /etc/group missing results in Root access Vulnerability